updated the ord_inventory module to allow for permissions